PT-2018-8377
CVE-2017-7429
·
تاريخ النشر
2018-03-02
·
تاريخ التحديث
2021-04-13
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
NetIQ eDirectory versions prior to 8.8.8 Patch 10 Hotfix 1
Description
The issue allows authenticated attackers to execute JSP applets on the iManager server by abusing the certificate upload feature in the NetIQ eDirectory PKI plugin.
Recommendations
For versions prior to 8.8.8 Patch 10 Hotfix 1, update to 8.8.8 Patch 10 Hotfix 1 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾